Pretty much what I thought... On Thu, Nov 19, 2015 at 5:20 PM, Kurt Buff <[email protected]> wrote:
> That's very cool. I wonder how I missed that? > > Kurt > > On Thu, Nov 19, 2015 at 1:55 PM, Richard Stovall <[email protected]> > wrote: > > I did not know about this until today. Pretty great addition to the > Windows > > auditing lineup. > > > > > https://dirteam.com/sander/2015/02/17/security-thoughts-include-command-line-in-process-creation-events/ > > > > Win 8.1, Server 2012 R2 (and presumably 10) already have the kb3004375 > bits > > baked in. > > > > Enjoy! > > >
